Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/_OIDroN0kJsw258q69N9sRtAShY.roa
File: _OIDroN0kJsw258q69N9sRtAShY.roa (raw, json)
Hash identifier: dY832u3QYrDATFv+njMY5TAinkb/4olHqj43ZmBQNCw=
Subject key identifier: FC:E2:03:AE:83:74:90:9B:30:DB:9F:2A:EB:D3:7D:B1:1B:40:4A:16
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018BB460FEC9CB178FDEA7F02A62E7E16312
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/_OIDroN0kJsw258q69N9sRtAShY.roa
Signing time: Thu 09 Nov 2023 13:58:57 +0000
ROA not before: Thu 09 Nov 2023 13:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 89.249.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:60:fe:c9:cb:17:8f:de:a7:f0:2a:62:e7:e1:63:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Nov 9 13:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fce203ae8374909b30db9f2aebd37db11b404a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8a:14:51:9f:61:ff:9f:c5:93:69:29:00:d6:
aa:0f:db:7b:9e:27:94:c4:62:1d:61:4e:c0:d3:86:
97:ec:3d:d7:1e:19:91:dc:fd:86:2e:66:a8:9f:1a:
dc:8b:1d:a8:9e:e2:45:fb:db:01:f1:7b:cf:a4:9c:
5d:e7:fe:77:01:c1:f0:c9:fd:75:f5:9e:36:ad:69:
60:23:d4:92:1f:e0:b1:69:ce:df:b7:22:3f:60:da:
23:fc:aa:9f:59:c7:41:d0:7f:ae:77:8b:8a:2c:fc:
ec:c7:34:58:1a:5e:e4:0d:15:11:bc:9b:8c:53:85:
93:59:d3:08:12:4d:92:80:d0:37:c2:cd:2d:26:af:
0f:42:49:2e:af:bc:a9:dd:d6:08:53:62:12:00:e1:
82:82:5f:e0:35:ea:13:9d:71:8d:73:82:e0:ab:39:
13:d0:70:32:1a:66:0e:59:74:85:c5:fc:65:b0:ef:
95:eb:e2:a2:e2:94:32:13:0a:63:4f:c2:4d:5c:a1:
ba:c1:2b:64:4b:84:2e:a7:30:51:0c:c3:f1:bd:51:
15:65:a9:2b:66:5b:f3:00:ac:12:3f:e2:be:27:57:
fe:d6:c0:58:44:26:c8:1b:42:de:61:d7:08:6f:f7:
2e:ac:e1:39:fa:86:a3:e2:5d:35:08:59:92:0a:6a:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:03:AE:83:74:90:9B:30:DB:9F:2A:EB:D3:7D:B1:1B:40:4A:16
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/_OIDroN0kJsw258q69N9sRtAShY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.205.0/24
Signature Algorithm: sha256WithRSAEncryption
42:55:53:54:74:31:78:cf:63:c7:39:ad:fc:fb:f9:0e:66:bb:
57:51:9d:73:ff:ab:be:f0:68:47:b2:91:40:89:3b:c3:c3:9c:
b1:9f:36:a4:19:e1:26:3d:8a:4c:26:be:4f:8f:36:64:86:9f:
fb:42:60:4e:f0:bf:9b:03:35:e3:e1:8b:ad:e0:07:7b:6b:5c:
b5:75:3c:b5:ed:51:94:3f:04:5d:b5:f7:cf:0f:39:72:d8:af:
e4:07:8f:26:7a:53:64:68:3f:f8:b7:61:60:a3:2a:eb:a6:d3:
7a:21:59:21:6d:ab:41:e2:20:3a:d1:98:6f:ee:46:1d:a4:7d:
65:f5:2a:b2:7c:df:1f:9e:07:fc:3d:ed:6c:71:6e:52:de:a4:
52:7e:ac:80:f1:71:55:23:e2:6f:a1:af:0d:05:b8:08:06:45:
c2:6f:67:1d:1d:87:e2:8e:36:ea:0b:8e:b5:c1:66:bf:f0:d3:
b4:f3:93:06:c6:25:c4:eb:1c:e3:60:ce:58:fb:e5:09:b6:08:
0d:b4:03:5f:e0:eb:95:13:aa:cf:43:c7:fe:4e:8b:8a:e2:12:
a6:48:ca:2c:96:9a:ab:4b:6d:3d:15:e3:24:79:fc:c1:22:38:
f2:ea:2d:5c:96:b6:b9:ac:aa:f2:e0:a5:cd:83:7b:66:8f:16:
4e:48:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:21 2024 by rpki-client on console.sobornost.net